├── CSharp └── JsonParser.cs ├── Examples ├── FjaletEVeshitDalinSheshit.json ├── IAMUserSSHKeys.json ├── Lëmsh_1.json ├── Lëmsh_2.json ├── Lëmsh_2_MoarObf.json ├── Lëmsh_3.json └── Rhino_3.json ├── Helpers ├── AWSHelper.psm1 ├── GeneralHelper.psm1 └── JSONHelper.psm1 ├── Images ├── SkyScalpel_Banner.png ├── SkyScalpel_Screenshot_Get-AwsAction.png ├── SkyScalpel_Screenshot_Interactive_Find-Evil.png ├── SkyScalpel_Screenshot_Interactive_Home.png ├── SkyScalpel_Screenshot_Interactive_Obfuscation.png ├── SkyScalpel_Screenshot_Parser_Token.png └── SkyScalpel_Screenshot_Parser_Token_Enriched.png ├── LICENSE ├── Modules ├── Deobfuscation │ ├── Deobfuscation.psm1 │ └── DeobfuscationHelper.psm1 ├── Detection │ └── DetectionHelper.psm1 ├── Obfuscation │ ├── Obfuscation.psm1 │ └── ObfuscationHelper.psm1 └── UI │ └── Invoke-SkyScalpelMenu.psm1 ├── README.md ├── SkyScalpel.psd1 ├── SkyScalpel.psm1 └── Tests ├── Add-RandomCase.tests.ps1 ├── Add-RandomUnicode.tests.ps1 ├── Add-RandomWhitespace.tests.ps1 ├── Add-RandomWildcard.tests.ps1 ├── Add-RandomWildcardSingleChar.tests.ps1 ├── ConvertFrom-RandomUnicode.tests.ps1 ├── ConvertFrom-RandomWildcard.tests.ps1 ├── ConvertFrom-RandomWildcardSingleChar.tests.ps1 ├── ConvertTo-JsonObject.tests.ps1 ├── ConvertTo-JsonParsedValue.tests.ps1 ├── ConvertTo-RandomCase.tests.ps1 ├── ConvertTo-RandomUnicode.tests.ps1 ├── ConvertTo-RandomWildcard.tests.ps1 ├── ConvertTo-RandomWildcardSingleChar.tests.ps1 ├── Expand-JsonObject.tests.ps1 ├── Format-JsonObject.tests.ps1 ├── Join-JsonObject.tests.ps1 ├── New-JsonToken.tests.ps1 ├── Out-LongestCommonPrefix.tests.ps1 ├── Out-LongestCommonSubstring.tests.ps1 ├── Out-LongestCommonSuffix.tests.ps1 ├── Remove-RandomUnicode.tests.ps1 ├── Remove-RandomWhitespace.tests.ps1 ├── Remove-RandomWildcard.tests.ps1 └── Remove-RandomWildcardSingleChar.tests.ps1 /CSharp/JsonParser.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/CSharp/JsonParser.cs -------------------------------------------------------------------------------- /Examples/FjaletEVeshitDalinSheshit.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Examples/FjaletEVeshitDalinSheshit.json -------------------------------------------------------------------------------- /Examples/IAMUserSSHKeys.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Examples/IAMUserSSHKeys.json -------------------------------------------------------------------------------- /Examples/Lëmsh_1.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Examples/Lëmsh_1.json -------------------------------------------------------------------------------- /Examples/Lëmsh_2.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Examples/Lëmsh_2.json -------------------------------------------------------------------------------- /Examples/Lëmsh_2_MoarObf.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Examples/Lëmsh_2_MoarObf.json -------------------------------------------------------------------------------- /Examples/Lëmsh_3.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Examples/Lëmsh_3.json -------------------------------------------------------------------------------- /Examples/Rhino_3.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Examples/Rhino_3.json -------------------------------------------------------------------------------- /Helpers/AWSHelper.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Helpers/AWSHelper.psm1 -------------------------------------------------------------------------------- /Helpers/GeneralHelper.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Helpers/GeneralHelper.psm1 -------------------------------------------------------------------------------- /Helpers/JSONHelper.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Helpers/JSONHelper.psm1 -------------------------------------------------------------------------------- /Images/SkyScalpel_Banner.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Images/SkyScalpel_Banner.png -------------------------------------------------------------------------------- /Images/SkyScalpel_Screenshot_Get-AwsAction.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Images/SkyScalpel_Screenshot_Get-AwsAction.png -------------------------------------------------------------------------------- /Images/SkyScalpel_Screenshot_Interactive_Find-Evil.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Images/SkyScalpel_Screenshot_Interactive_Find-Evil.png -------------------------------------------------------------------------------- /Images/SkyScalpel_Screenshot_Interactive_Home.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Images/SkyScalpel_Screenshot_Interactive_Home.png -------------------------------------------------------------------------------- /Images/SkyScalpel_Screenshot_Interactive_Obfuscation.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Images/SkyScalpel_Screenshot_Interactive_Obfuscation.png -------------------------------------------------------------------------------- /Images/SkyScalpel_Screenshot_Parser_Token.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Images/SkyScalpel_Screenshot_Parser_Token.png -------------------------------------------------------------------------------- /Images/SkyScalpel_Screenshot_Parser_Token_Enriched.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Images/SkyScalpel_Screenshot_Parser_Token_Enriched.png -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/LICENSE -------------------------------------------------------------------------------- /Modules/Deobfuscation/Deobfuscation.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Modules/Deobfuscation/Deobfuscation.psm1 -------------------------------------------------------------------------------- /Modules/Deobfuscation/DeobfuscationHelper.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Modules/Deobfuscation/DeobfuscationHelper.psm1 -------------------------------------------------------------------------------- /Modules/Detection/DetectionHelper.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Modules/Detection/DetectionHelper.psm1 -------------------------------------------------------------------------------- /Modules/Obfuscation/Obfuscation.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Modules/Obfuscation/Obfuscation.psm1 -------------------------------------------------------------------------------- /Modules/Obfuscation/ObfuscationHelper.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Modules/Obfuscation/ObfuscationHelper.psm1 -------------------------------------------------------------------------------- /Modules/UI/Invoke-SkyScalpelMenu.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Modules/UI/Invoke-SkyScalpelMenu.psm1 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/README.md -------------------------------------------------------------------------------- /SkyScalpel.psd1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/SkyScalpel.psd1 -------------------------------------------------------------------------------- /SkyScalpel.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/SkyScalpel.psm1 -------------------------------------------------------------------------------- /Tests/Add-RandomCase.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Add-RandomCase.tests.ps1 -------------------------------------------------------------------------------- /Tests/Add-RandomUnicode.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Add-RandomUnicode.tests.ps1 -------------------------------------------------------------------------------- /Tests/Add-RandomWhitespace.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Add-RandomWhitespace.tests.ps1 -------------------------------------------------------------------------------- /Tests/Add-RandomWildcard.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Add-RandomWildcard.tests.ps1 -------------------------------------------------------------------------------- /Tests/Add-RandomWildcardSingleChar.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Add-RandomWildcardSingleChar.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertFrom-RandomUnicode.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertFrom-RandomUnicode.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertFrom-RandomWildcard.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertFrom-RandomWildcard.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertFrom-RandomWildcardSingleChar.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertFrom-RandomWildcardSingleChar.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertTo-JsonObject.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertTo-JsonObject.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertTo-JsonParsedValue.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertTo-JsonParsedValue.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertTo-RandomCase.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertTo-RandomCase.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertTo-RandomUnicode.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertTo-RandomUnicode.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertTo-RandomWildcard.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertTo-RandomWildcard.tests.ps1 -------------------------------------------------------------------------------- /Tests/ConvertTo-RandomWildcardSingleChar.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/ConvertTo-RandomWildcardSingleChar.tests.ps1 -------------------------------------------------------------------------------- /Tests/Expand-JsonObject.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Expand-JsonObject.tests.ps1 -------------------------------------------------------------------------------- /Tests/Format-JsonObject.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Format-JsonObject.tests.ps1 -------------------------------------------------------------------------------- /Tests/Join-JsonObject.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Join-JsonObject.tests.ps1 -------------------------------------------------------------------------------- /Tests/New-JsonToken.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/New-JsonToken.tests.ps1 -------------------------------------------------------------------------------- /Tests/Out-LongestCommonPrefix.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Out-LongestCommonPrefix.tests.ps1 -------------------------------------------------------------------------------- /Tests/Out-LongestCommonSubstring.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Out-LongestCommonSubstring.tests.ps1 -------------------------------------------------------------------------------- /Tests/Out-LongestCommonSuffix.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Out-LongestCommonSuffix.tests.ps1 -------------------------------------------------------------------------------- /Tests/Remove-RandomUnicode.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Remove-RandomUnicode.tests.ps1 -------------------------------------------------------------------------------- /Tests/Remove-RandomWhitespace.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Remove-RandomWhitespace.tests.ps1 -------------------------------------------------------------------------------- /Tests/Remove-RandomWildcard.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Remove-RandomWildcard.tests.ps1 -------------------------------------------------------------------------------- /Tests/Remove-RandomWildcardSingleChar.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Permiso-io-tools/SkyScalpel/HEAD/Tests/Remove-RandomWildcardSingleChar.tests.ps1 --------------------------------------------------------------------------------